Information Assurance Engineer - Cybersecurity Focus

- Develop and coordinate all authorization documentation including Systems Categorization, Systems Security Plan, and Systems risk assessment - Manage Authority to Operate (ATO) packages using continuous monitoring strategies as directed by the ISSM - Support control assessment, reporting, and monitoring processes via the Cyber Security and Assessment Management (CSAM) system - Create and maintain documentation for minor and major modifications - Keep track of waivers and Risk assessments for ISSMs - Assist ISSMs in making decisions impacting security for systems and networks - Prepare for all Contingency/Incident response assessments - Conduct and document risk assessments while analyzing security vulnerabilities and risks - Design and develop comprehensive Systems Security Plans that outline infrastructure, policies, and procedures defining the systems security profile - Review and validate System Test and Evaluation (ST&E) and Interim Authority to Test (IATT) reviews for both new and legacy systems - Perform NIST-based Self Assessments to identify weaknesses, developing a Plan of Action and Milestones (POA&M) for each - Request risk acceptance for vulnerabilities that cannot be remediated or mitigated - Create and track POA&Ms for risk mitigation identified through ACAS and STIG processes based on the risk profile - Design and develop Initial Privacy Assessments (IPA) and Privacy Impact Assessments (PIAs) for major Federal Government IT systems - Utilize the eMass tool to manage the security profile of the system - Employ the Ports, Protocols, and Service Management (PPSM) tool and processes to register ports, protocols, and services used by enclaves